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Abstract. Hasse constants and their basic properties are introduced to facilitate the con- 
nection between the lattice of subalgebras of an algebra C and the natural action of the 
automorphism group Aut(C) on C. These constants are then used to describe the lattice 
of subloops of the smallest nonassociative simple Moufang loop. 



1. Introduction 

To completely describe the lattice of subalgebras Sub(C) of a finite algebra C is 
a difficult task. Moreover, it is not obvious how to store the information about 
Sub(C) efficiently, as the cardinality and complexity of Sub(C) is typically much 
larger than that of C. Fortunately, sometimes there is a procedure that allows us to 
calculate the join A V B and meet A A B for every A, B 6 Sub(C). For instance, it 
is easy to find the join and meet in any boolean algebra C, although |Sub(C)| grows 
exponentially in \C\. It is this ability to calculate A and V that is often understood 
as a complete description of Sub(C). 

Most of the time we are not so lucky, though, and there is no apparent way to 
find joins and meets. The main reason is that AW B and A A B can be far from 
both A and B in the lattice Sub(C). It is therefore more convenient to have access 
to a procedure that gives a complete local description of Sub(C). Assuming that 
it is possible to find all maximal subalgebras of A < C and all subalgebras B < C 
in which A is maximal, the lattice Sub(C) can be built up inductively. We will 
refer to all subalgebras immediately above and immediately below A in Sub(C) as 
neighbors of A, and we denote the set they form by Nbd(A). 

In this context, it is worth paying attention to the automorphism group Aut(C) 
and its natural action on C, since the neighborhoods of A and B will be "the same" 
for A, B 6 Sub(C) belonging to the same orbit of transitivity of Aut(C). Thus, 
the lattice Sub(C) can be fully described as long as we find 

(t\) one representative A from each orbit of Aut(C), 

(£2) the neighborhood Nbd(A) for every representative A, and 
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(£3) an automorphism of C mapping B onto A, for every representative A and 
every B from the orbit of A. 
To save space, we can store subalgebras by their generating sets, and substitute 
Nbd(A) and the automorphisms required by (£3) with an efficient algorithm pro- 
ducing those. 

The purpose of this paper is twofold. First, to introduce a general tool — Hasse 
constants — that is of some help in all three tasks (£1), (£2), (£3)- Secondly, to use 
Hasse constants to describe the subloop lattice of the smallest nonassociative simple 
Moufang loop M*(2). The investigation of Sub(M*(2)) occupies most of this paper, 
and is inevitably of rather detailed nature. We maintain that the power of Hasse 
constants is sufficiently demonstrated by the fact that Sub(M*(2)) was not known 
before (see Acknowledgement), especially given the importance of M*(2) for the 
real octonions. 

Although considerable invention will be required in each particular case, we be- 
lieve that Hasse constants will help to keep track in investigation of any subalgebra 
lattice. 

A word about the notation: we write C n for the cyclic group of order n, D n for 
the dihedral group of order 2n, and E%n for the elementary abelian 2-group of order 
2™. A subalgebra generated by the set S well be denoted by (S). 

2. Hasse constants 

Let A, B, C be finite (universal) algebras, A < C. For X < C, let Ox denote 
the orbit of X under the natural action of Aut(C) on the set of subalgebras of C 
isomorphic to X. We will speak of the subalgebras of C isomorphic to X as copies 
of X in C. Define 

H C {B) = \{B <C; B = B}\, 
Hc(A\B) = \{B <C; A < B = B}\. 

Furthermore, when B < C, let 

H* C (A\B) = \{B <C; A< B , B e O b }\. 

In words, Hc(B) counts the number of copies of B in C, Hc(A\B) counts the 
number of copies of B in C containing A, and H.* C (A\B) counts the number of 
copies of B in C containing A and in the same orbit as B. 

Yet another description of these constants is perhaps the most appealing. For 
B < C, the constant Hc{B) counts the number of edges connecting C to a copy 
of B in the complete Hasse diagram of Sub(C). The remaining two constants can 
be interpreted in a similar way. We will therefore refer to them jointly as Hasse 
constants. 

Note that H C {A\B) = H* C (A\B) if Aut(C) acts transitively on the copies of B 
in C. 

Lemma 2.1. Let A, B, C be algebras, A < C. 

(i) IfB' ^B,C = C, then H C {B) = H C >(B'). 
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(ii) If A' e A , B' = B, then Hc{A\B) = Hc(A'\B'). 

(iii) If A' e Oa, B < C, B' e B , then 7i* c (A\B) = H* C {A'\B'). 

Proof. Part (i) is obvious from the definition of Hc(B). The equality Hc(A\B) = 
H C (A\B') holds if B = B' . Let A' £ A , and let / 6 Aut(C) be an automor- 
phism mapping A to A'. Then H C (A\B) = H f{C )(f(A)\f{B)) = H c (A'\f(B)) = 
TLc{A'\B). This proves (ii). Part (iii) is similar (use Ob = Ob 1 )- □ 

Example 2.2. This example shows that the constants TCc(A\B), TCc(A'\B) may 
differ even though A = A'. Let C be the group C 2 x C 4 , C 2 = {0, 1}, C 4 = {0, 
f , 2, 3}, and denote by D = {0, 2} the two-element subgroup of C4. The lattice 
of subgroups of C is depicted in Figure Q] With A = C\ x D = C 2 x C\ = A', we 
have Hc(A\C 4 ) =2^0 = Hc{A'\Ci). 




Figure 1 . Lattice of subgroups of C2 X C4 



Proposition 2.3. Let C be an algebra, A, B < C. Let A\, . . . , A m be representa- 
tives from all orbits Oa 17 ■ ■■ , OA m of the action of Aut(C) on the copies of A in 
C. Similarly, let B\, . . . , B n be representatives for B. Then 

n 

H C (A\B) = ^HUAlBj), (1) 

3=1 
m 

Hb(A)-\O b \ = J2\°^\- n *c( A i\ B )> ( 2 ) 

i=l 
m 

Hb{A)-H c {B) = J2\°^\- H c( A *\ B )- (3) 

i=l 

When Aut(C) acts transitively on the copies of B (i.e., when n = 1), then ([J|) 
coincides with (0). When Aut(C) acts transitively on the copies of A (i.e., when 
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m = 1), then 

Hb(A)-\O b \=H c (A)-H* c (A\B), (4) 
Hb{A)-H c {B) = Hc{A)-Hc{A\B). (5) 

Proof. Since every copy of B in C belongs to exactly one orbit Bj , (p} follows. 
To establish @, count twice the cardinality t of 

{{A , Bo); A^A <B e O b }. 

On the one hand, 

t= E KbAA)^ E n B (A) = n B (A)-\o B \. 

B gOb B £Ob 

On the other hand, 

t= Y, K* c (Ao\B)=Yl E nhiAolB^^YlOA.l-HUAm- 

A <C, Aq^A i=l A GO Ai i=l 

The proof of (J3j) is similar to ([2]) ■ Just count twice the cardinality of the set 

{(A , B ); A = A Q < B < C, B = B}. 
When m = 1, Q and ([5]) follow immediately from ([2]) and ([3]), respectively. □ 

3. Finite simple Moufang loops and loops of type M2 n (G, 2) 

Loops satisfying one of the equivalent Moufang identities, for instance the identity 

((xy)x)z = x(y(xz)), (6) 

are called Moufang loops [12]. By a result of Kunen [9], every quasigroup satisfying 
d6j) is a Moufang loop. Obviously, every group is a Moufang loop. Moufang loops are 
power associative (i.e., every 1-generated subloop is a group), in fact diassociative 
(i.e., every 2-generated subloop is a group). Every element a; of a Moufang loop 
has a (unique) two sided inverse x~ l . 

Paige [11], Doro [6] and Liebeck [10] showed that there is only one class of 
nonassociative finite simple Moufang loops, consisting of loops M*(q), one for each 
finite field GF(q). 

These loops are best studied via composition algebras. Following [13], let 0(q) 
be the unique split octonion algebra over GF(q). Then M*(q) is isomorphic to the 
multiplicative loop of elements of norm 1 in 0(q) modulo the center. The algebra 
0(q) was first constructed by Zorn as follows. Given a prime power q, let • be the 
standard dot product and x the standard vector product on GF(q) 3 . Then the 
algebra of vector matrices 

(a, b G GF(q), a, G GF(q) 3 ) 
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with addition defined entry-wise and multiplication governed by 

a a \ / c 7 \ _ / ac + a ■ 5 aj + ad — j3 x 5 \ , . 

^ () d j = ^c + 6i + ax 7 P ■ 7 + bd ) ^ ' 

is isomorphic to O(q). The norm on 0(q) coincides with the determinant det a; = 
ab — a ■ p. The neutral element is 

1 (0, 0, 0) 
(0, 0, 0) 1 

and every element x with nonzero norm has inverse 

_i 1 ( b -a 

detrz; \ ~P « 

The order of M*{q) is q 3 {q 4 — 1) when q is even, and q 3 {q 4 — l)/2 when q is odd 
[11]. 

Notably, the loop M*(2) has also connections to the standard real (division) 
octonion algebra. Namely, it is isomorphic to the integral real octonions of norm 1 
modulo the center (cf. [5], [14]). 

Let us recall loops of type M2 n (G, 2) = M(G), first constructed in [1]. For a 
group G of order n, define new multiplication • on G x C2 by 

(9, i)-(h,j) = ((9^ i hW +i )(-» i ,i + j). 

Then (G x C2, •) is a Moufang loop, and we denote it by M(G). It is nonassociative 
if and only if G is nonabelian (cf. [1]). 

Write M(G) = G U Gu for some element u £ M{G) \ G. Lemma O (cf. [16, 
Prop 4.12]) is easy to prove once you realize that 

- every element of Gu is of order 2, 

- G • G = Gu ■ Gu = G, G ■ Gu = Gu ■ G = Gu, 

- every subloop H £ G of M (G) satisfies \H n G\ = \H n Gu\. 

Lemma 3.1. Let G be a group of order n, and let M(G) = G U Gu be constructed 
as above. 

(i) We have 

' H G (C m ), tfm^2 ; 
H G (C m )+n, ifm = 2. 

(ii) (H, gu) = E 2k +i for every g e G, H < G, H ~ E 2k , k > 0. 

(iii) For k > 1, 

n M (G)(E 2k ) = ^ ^ G ( jB2t)+WG ( jE ; 2fe _ 1 ). n .2i-fc ) otherwise! 

(iv) (5, /lit) = 53 for every g, h 6 G wfft |fif| = 3. 

(v) W G (G 3 ) ^ and Hg(S 3 ) = 0, then H M {G){G) = 1. 

It was proved in [15] that M(G) is presented (in the variety of Moufang loops) 

by 

(x, y, u; R, u 2 = {xuf = (yu) 2 = {{xy)u) 2 = e), (8) 



T^M(G)(G n 
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whenever G is a 2-generated group with presentation 

(x, y; R). 



In particular, presentations for the loops M(S3) and M(A±) can be obtained from 
this result. 

4. Main goal 

We proceed to describe the subloop lattice of M*(2), guided by steps (£1), (£2), 
(£3) of Section [1] We fulfil (^i) and give reasonable amount of details with respect 
to (£2) and (£3). In particular, we calculate all Hasse constants Hc(B), Hc(A\B), 
H* C {A\B), for A < B < C = M*(2). 

At several places, the reader will be kindly asked to verify a few details by 
straightforward, easy calculations. Most of these calculations are reduced to a 
quick glance into Table [T] The table itself can be checked for accuracy within 
minutes, using Lemma |7. 11 No machine computation is needed. 

5. Possible subloops 

Fix F = GF{2) and C = M*(2). It is easy to see that C consists of 120 elements 
of order 1, 2, 3. More precisely, 



satisfies |sg| = 2 if and only if a = b and x =/= e; and \x\ — 3 if and only if a b. To 
linearize our notation, we write x = [a, 0\ a when \x\ = 2, and x = {a, (3} a when 
|a;| = 3. Since a can be calculated from a, (3 when \x\ = 2, we further simplify 
involutions to x = [a, P]. Note that {a, = {a, ft} i+ a , where the addition is 

modulo 2. 

Elementary counting reveals that there are 63 involutions and 56 elements of 
order 3 in C. Using the language of Hasse constants, 'Hc{C-i) = 63, TLc{Cz) — 
56/2 = 28. 

Chein classified all nonassociative Moufang loops of order at most 63 [2] , and we 
will call such Moufang loops small. Since C has 120 elements, every proper subloop 
of C is small and can be found in Chein's list. 

As in [12], we say that a finite loop L has the weak Cauchy property when 
it contains a subloop of order p for every prime p dividing \L\. It has the weak 
Lagrange property if \H\ divides |L| for every H < L. Finally, L has the strong 
Cauchy (Lagrange) property if every subloop of L has the weak Cauchy (Lagrange) 
property. 

Since 5 divides |C|, C does not have the weak Cauchy property. However, it 
follows from [2, Ch. XIV] that all small Moufang loops have it. (They also have the 
strong Lagrange property. If one proves that every M* (q) has the strong Lagrange 
property, it will follow that all Moufang loops have it (cf. [4]). As of now, this is an 
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open question. Glauberman proved [8] that all Moufang loops of odd order have 
the strong Lagrange property.) 

Corollary 5.1. The order of every proper subloop of C is 2 r 3 s , for some r, s. 

Lemma 5.2. Let x, y G C, \x\ = \y\ = 3, y (x). Then (x, y) contains an 
involution. 

Proof. We may assume that x — {a, ($}\, y — {7, <5}i, for some a, [3, 7, S G F 3 . 
Then exactly one of the two elements xy, x 2 y is of order 2. □ 

This means that 9 does not divide the order of any subgroup of C. Every group 
of order 24 contains an clement of order at least 4 (the only two nonabelian groups 
of order 24 with Sylow 2-subgroups isomorphic to E$ are Dq x C2 and A4 x C2). 
Hence \G\ G {1, 2, 3, 4, 6, 8, 12, 16, 32, 48} for every subgroup G of C. It is 
not obvious, at least to the author, that C contains no subgroups of order 16, 
necessarily isomorphic to E\§. It is true, however, and we prove it in Section [14l 
Hence \G\ = {1, 2, 3, 4, 6, 8, 12}. 

Chein concludes in [2, Ch. XII] that every small Moufang loop containing no 
element of order greater that 3 is necessarily of the form M{G) for some nonabelian 
group G. Thanks to the restrictions on \G\, there are only two candidates for G, 
namely S3 (the symmetric group of order 6) and A4 (the alternating group of order 
12). 

Corollary 5.3. A nontrivial subloop of C is isomorphic to 

C 2 , C 3 , £4, S3, E 8 , Ai, M(S 3 ) or M{A 4 ). (9) 
In particular, C has the strong Lagrange property. 

All loops listed in ([9]) actually occur as subloops of C, as we shall see. 



6. Automorphisms 

We construct three kinds of automorphisms of C. 

Lemma 6.1. Let f : F 3 — > F 3 be a nonsingular linear transformation. Define 
f: 0(2) 0(2) by 

->( a a \ _ f a f(a) \ 

J { p b ) - \ m b ) ■ 

Then f G Aut(0(2)) if (and only if) f is an automorphism of the Lie algebra 
(F 3 , +, x). 

Proof. Linearity is obvious and the rest follows by straightforward computation 
using Zorn's multiplication ([7]). □ 

Identify ir £ S3 with the linear transformation F 3 — > F 3 , (ai, 03) 1— > (a^i), 
Q ; 7 r(2)7 c*7r(3))- By Lemma l6.1[ tt G Aut(C). To keep the terminology simple, we will 
call such automorphisms permutations (of coordinates). 
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Define d : 0(2) -» 0(2) by 



d 



( 



P b 



a 



a 



) 



( 



a 



b 13 



a 



) 



(10) 



and verify that d G Aut(0(2)). 

Finally, we focus on conjugations. Not every conjugation in a Moufang loop is 
an automorphism. 

Lemma 6.2. Let Q be a simple Moufang loop. For x G Q define ^ x ■ Q — > Q by 
lx{y) = x~ x yx. Then j x is a nontrivial automorphism of Q if and only if \x\ = 3. 

Proof. By [12, Thm IV. 1.6], j x is a pseudo-automorphism with companion x~ 3 . So 
7a, is an automorphism whenever |x| divides 3. 

Conversely, if j x is a nontrivial automorphism of Q, then it must be a pseudo- 
automorphism with companions e and x~ 3 . By [12, Thm IV. 1.8], the set of all 
companions of "f x equals eN(Q), where N(Q) is the nucleus of Q. Since Q is 
simple, we must have a;~ 3 = e. □ 

Remark 6.3. The conclusion of Lemma 16 . 1 I rcmains valid over any finite field GF(q), 
but we then get — tt G Aut(0(q)), rather than n G Aut(0(q)). The map 9 : 0(q) — » 
0(g) defined by (|10p is an automorphism if and only if g is even. 

7. Subloops isomorphic to O2 

The detailed discussion concerning Sub(O) starts here. 

Lemma 7.1. Lei .t = [a, (3\ n , y — [7, <5] m be two involutions, x ^ y, and let 
z = {e, ip} t be an element of order 3 in C . Then: 

(i) \xy\ = 2 if and only if (x, y) = -E4 ?/ and only if a ■ S = ■ 7, 

(ii) |xy I = 3 if and onZy i/ (x, y) = S3 if and only if a ■ 8 ^ (3 ■ 7, 

(iii) cc is contained in a copy of S3, 

(iv) every copy of S3 contains an involution of the form [_, _]o, 

(v) \zx\ = 2 if and only if a ■ ip + (3 ■ e = n, 

(vi) z is contained in a copy of S3 . 

Proof. The involution x commutes with y if and only if \xy\ = 2. Since 



parts (i) and (ii) follow. Part (v) is proved similarly. 

Let x = [a, /?]„. Without loss of generality, assume that (3 ^ 0. Pick 7, 5 so 
that a ■ 6 = 0, p ■ 7 ^ 0. Then choose m € {0, 1} so that y — [7, <5] m G C. Then 
(2, y) — S3, and (iii) is proved. 

Let G < C, G = S3, and suppose that x = [a, (3]i, y = [7, S]i G G, x ^ y. Then 




nm + a ■ 5 



nm + f3 ■ 7 




xy = 



( 



1 + a • 6 

(3 + S + a x 7 



a + 7 + /3 x <5 
1 + /3-7 



) 
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Since \xy\ = 3, we have a ■ S ^ [3 ■ 7. In other words, a • 6 + /3 • 7 = 1. Then the 
third involution xyx G G equals 

l + a-5+(a + j)-j3 _ \ / a ■ {3 



Now, a ■ P = since det a: = 1, and we are through with (iv). 

Since det z 0, we can assume that the first coordinate of both e and ip is equal 
to 1. Then a = (1, 0, 0), (3 = (0, 0, 0) and n = 1 make x = [a, /?]„ into an involution 
satisfying \zx\ = 2, by (v). This proves (vi). □ 

Let us write ai«2Q3 for the vector a — {ot\, 0:2, a^) E -F 3 , and w(a) for a\ + 
«2 + «3 (the weight of a). 

Introduce so = [111, 111] as the canonical involution of C. 

Observe that when x, y are two involutions of C generating a subgroup isomor- 
phic to 53 then "f yx 6 Aut(C) maps x to y. 

Proposition 7.2. Aut(C) acts transitively on the 63 copies 0/C2 in C. 

Proof. We show how to map an arbitrary x — [a, (3\ n onto xq. By Lemma l7.1f iii). 
a: is contained in a copy of S3. Then, by Lemma I7.1f iv) and the observation 
immediately preceding this Proposition, we can assume that n = 0. 

Let r = w(a), s = w(/3). Using d from Section [6l we can assume that r > s. 
We now fix ?/ = [100, 100] and proceed to transform x into a/ so that x' = xq, or 
x' = y, or (a;', a; ) = S3, or (x' , y) = S 3 . 

When r ^ s (mod 2), then (x, xo) = by Lemma ITTlT ii). So assume that 
r = s. Since n = 0, we have s > 0, and thus (r, s) = (1, 1), (2, 2), (3, 1), or 
(3, 3). Every permutation of coordinates can be made into an automorphism of C, 
as we have seen in Section[6] Moreover, xq is invariant under all such permutations. 
When (r, s) = (1, 1), transform x into y. When (r, s) = (2, 2), transform x into 
x' = [110, 011], and note that (x' , = S3. When (r, s) = (3, 1), transform x into 
x' = [111, 001], and note again that (a;', y) = S3. Finally, when (r, s) = (3, 3), we 
have x — xq. 

Now, when (a;', a;o) = S3 or (x' , = S3, we can permute the involutions of C 
so that x' is mapped to xq or ?/, respectively. Since xq = 7{ooi. ioi}i (?/), we are 
done. □ 

Note that, in spirit of (£3), the proof of Proposition 17. 21 tells us how to construct 
automorphisms mapping involutions of C onto the representative xq. 



8. Subloops Isomorphic to C3 or S3 

In this section, we apply Proposition ^. 3l for the first time. We have taken advantage 
of the fact that all permutations and d leave Xq invariant. To proceed further, we 
need additional automorphisms with this property. 

Consider v = {010, 110} , «i = {001, 101} , and define £ : C -> C by £ = 
7„-i 7o < Then £ £ Aut(C), by Lemma HT21 and £(xq) = .tq- 



10 



PETR VOJTECHOVSKY 



Set xi = [110, 100], and let yo = xoxi = {Oil, 110}i be the canonical element 
of order 3. 

Proposition 8.1. Aut(C) acts transitively on the copies of S3 and C 3 . 

Proof. Since Hs 3 (C 3 ) = 1 and Hc(C 3 \S 3 ) > 0, by Lemma 17711 vi) . it suffices to 
prove that Aut(C) acts transitively on the copies of S3. Let G = S3, G — (x, y) , 
\x\ = \y\ — 2. By Proposition 17.21 we can assume that x — xq. Write y — [a, j3] n , 
r = w(a), s = w(/3). By Lemma l7.ll we have r ^ s. Using d, we can assume that 
r > s. We are going to transform y into X\. 

Assume that n = 1. Then a ■ (3 = 0. Taking permutations of coordinates and the 
possible values of (r, s) into account, we transform y into one of X2 — [010, 000], 
x 3 = [011, 100], X4, = [111, 000], x 5 = [111, 101]. With £ as above, check that all 
of £(x 2 ), £~ 1 (x 3 ), £{xi) and ^~ 1 {x^) have zeros on the diagonal. 

We may hence assume that n = 0. Then (r, s) = (2, 1), and we are done by 
permuting coordinates. □ 

Lemma 8.2. H C (C 2 \S 3 ) = 16, H C (S 3 ) = 336, H C (C 3 \S 3 ) = 12. 

Proof. Pick an involution x. By Proposition ^. 1[ the number of involutions y satisfy- 
ing \xy\ — 3 is independent of x. One can then immediately see with x = [100, 100], 
say, that there are 32 such involutions. As Tts 3 (C2) — 3, we get Hc(C2\S 3 ) = 16. 
Then, by ©, H C (S 3 ) = H C (C 2 ) ■ U C {C 2 \S 3 ) ■ Us^y 1 = 336. Again by ©, 
Hc{C 3 \S 3 ) = Hs 3 (C 3 ) ■ H C {S 3 ) ■ Hc{C 3 )- 1 = 12. □ 

Note that Lemma 1 7 . 1 1 allows us to construct all copies of S3 containing xq, and 
also all copies of S3 containing y$. Note further that we did not have to resort to 
local analysis to find the value of Wc(C3|S3). 

From this moment on, we will pay less attention to (£ 2 ) and (^3). 

9. Subloops isomorphic to At 

Fix z = {110, 100}o, and recall that H Ai (C 2 ) = 3, H Ai {C 3 ) = 4. 

Proposition 9.1. Aut(C) acts transitively on the 63 copies of A^, and 
Hc(C 2 \A 4 ) = 3. 

Proof. Working in C, we have (G, x) = S 3 or for every copy G of C 3 and every 
involution x. Since H.c{C 3 \S 3 ) = 12 and H.s 3 (C 2 ) = 3, there are 36 involutions x 
in G such that (G, x) = S3. Thus H c {C 3 \Ai) = (63 - 36) • HaA^)' 1 = 9. By 
©, H C {A A ) = H C (C 3 ) ■ H C {C 3 \A A ) ■ UaA^)- 1 = 63. 

As for the transitivity, pick G = A4. By Proposition 17. 21 we can assume that 
G = (xq, z), for some z — {e, ip}t with r = w(e), s = w(ip). Since |a:o2;| = 3, 
we have r ^ s, by Lemma I7.1f v). and may thus assume that r > s > 1. Then 
(r, ,s) = (2, 1) is the only possibility, and z can be transformed to zq or Zq . □ 

Perhaps it would be more natural to look at the copies of E A now, however, 
the Klein subgroups of C are exceptional in the sense that Aut(C) does not act 
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transitively on them (cf. Section [T2j) . We therefore proceed towards 3-generated 
subloops instead. 

10. Subloops isomorphic to A/ (£3) 

Have a look at Table [1] It lists all involutions of C and their relation to a few 
chosen elements of C . 
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2 2 2 
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2 2 3 
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3 2 3 
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2 3 3 


2 


3 3 2 


2 2 2 


3 
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3 


2 3 


2 2 3 


3 


2 2 2 


3 


3 
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3 2 3 


2 3 3 


3 


3 3 2 


2 
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Table 1 . Involutions in M* (2) and their relation to a few elements 
of M* (2) . The cell in row a and column (3 corresponds to involution 
x = [a, 0\. It contains the values \xox\, \x\x\, \yox\ (in the first 
row), \(zq 1 x zq)x\, \uix\, \u%x\ (in the second row), where Xq, 
yo, Zq, u i an d u 2 ar e as in Theorem 114.11 and X\ = [110, 100]. 
The values of xix|, yox|, itix|, U2x| are calculated only when 
\xox\ — 2. Moreover, \yax\ is calculated only when xix| = 2. No 
orders are calculated for e and xq. 



By [1] or [15], H M( s 3 )(S 3 ) = 3. By Lemmalji), H M (s 3 )(C 2 ) = 9. 
Introduce u = [000, 110]. 

Proposition 10.1. Ttc(S3\M(S3)) — 1. In particular, Aut(C) acts transitively on 
the 112 copies of M(Ss). 

Proof. In view of Proposition 18. 1[ it suffices to prove h — 7ic{S3\M(S3)) = 1 and 
count the copies of M(5 I 3). 

By ©, M(Ss) is presented by (x, y, it; x 2 = y 2 — (xy) 3 = u 2 = (xu) 2 = 
(yu) 2 = {{xy)u) 2 — e). Using Lemma |7. 11 verify that x = xq, y = x\ and u = uq 
satisfy these presenting relations, i.e., that h > 1. 
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Let G be a copy of S3. By Proposition l8.H we can assume that G — (xo, x\). Ac- 
cording to TableQ] there are 6 involutions u such that \xqu\ — \xiu\ = |(a;oa;i)u| = 2 
(recall that xox± = yo). Since M\ 2 (G) \ G consists solely of involutions, we have 
proved h < 1. 

By ©, H C (M(S 3 )) = H C (S 3 ) ■ H C (S 3 \M(S 3 )) ■ Hm^S^ 1 = 112. □ 

11. Subloops isomorphic to M(Aa) 

We have Hm(a 4 )(^) = 1 as a special case of Lemma l3~Tl v). 
Introduce ui = [001, 001]. 

Proposition 11.1. Tic{A4\M(A4)) = 1. In particular, Aut(C) acts transitively 
on the 63 copies of M(^4 4 ). 

Proof. In view of Proposition l9.ll it suffices to prove h = Hc(A4\M(A4)) = 1 and 
count the copies of Af(^4 4 ). 

By ©, M (A 4 ) is presented by (x, y, u; x 2 — y 3 — (xy) 3 = u 2 = (xu) 2 — 
(yu) 2 = ((xy)u) 2 — e). Verify that x = xq, y = zq and u — u\ do the job, hence 
h> 1. 

Let G be a copy of A4. By Proposition 19. 1\ we can assume that G — {xq, zq). 
Then v — Zq 1 xqZq S G is an involution. According to Table [TJ there are 13 
involutions u such that \xou\ — \vu\ = 2. (One of them is xqv.) That is why h <l. 

By ©, H C (M(A 4 )) = H c (i 4 ) ■ H C {M\M{A A )) • ^m^)^)" 1 = 63. □ 

Let us calculate a few more Hasse constants. 

Lemma 11.2. We have 

H C (C 2 \A4) = 3, H M (a 4 )(C 3 ) = 4, H C (C 3 \M(A4)) = 9, 
n M{S3) {C2) = 9, H C (C 2 \M(S 3 )) = 16, H M{Ai) {C 2 ) = 15, 
ft c (G 2 |Af(A 4 )) - 15, Wm(s,)(C 3 ) = 1, Hc(G 3 |Af(S 3 )) = 4, 
Hm ( a 4) (5 3 ) = 16, Hc(S 3 \M(A 4 )) = 3. 

Proof. Since 7^4 4 (G 2 ) = 3, © yields Wc(G 2 |Ai) = 3. As 7iAf(G)(Cm) is known 
fLemma |3.1|) . the value of TL c {C m \M{G)) can be calculated by too. 

It remains to find H M {Ai){Sz) and ^ c (5 3 |Af(A 4 )). Let M = M(A 4 ) = G U Gw, 
where G = A 4 . Every subgroup of Af isomorphic to S 3 can be written as (x, yu) for 
some x, y £ G, |x| = 3, and there are exactly six choices of (x, y). Since H.a 4 (C 3 ) = 
4, we have H M(Ai) {S 3 ) = 2 ■ 4 • 12/6 = 16. Consequently H c {Sz\M(Ai)) =3. □ 

12. Subloops isomorphic to E4 

As announced before, we show that Aut(G) does not act transitively on the copies 
of E4. 

Introduce u 2 = [100, 010]. 

Lemma 12.1. Let {x, y) be one of the 315 copies of E4 in C. Then there is 
Lp G Aut(G) such that f(x) = xq and <p(y) £ {ui, u 2 }. 
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Proof. Recall that TLc{C 2 \S 3 ) = 16. Therefore, given any involution x, there are 
63 — 1 — 2-16 = 30 involutions y such that (x, y) = E4. Hence, Ti.c{Ei) — 
63-30/(2-3) =315. 

As always, we may assume that x = xq, y — [a, 0\ n , w(a) = r, w(/3) = s, r = s, 
and r < s. When (r, s) = (0, 2), transform y into uq; if (r, s) = (1, 1), into u\ or 
u 2 , depending on n; if (r, s) = (1, 3), into U3 = [001, 111]; if (r, s) = (2, 2), into 
m = [110, 110] or u 5 = [011, 1Q1]. 

Recall the automorphism £ from Section[51 and check that £(u 4 ) = u\, £,(u 3 ) = 
u 2, £( u s) — u 3i £ (^5) — 9(uo)- Thus u 4 can be transformed into m 4 , and each of 
Mo, U3, U5 can be transformed into u 2 . O 

Assume, for a while, that Aut(C) acts transitively on the 315 copies of E4. 
Then, by ©, H C (E 4 \A 4 ) = H Ai {Ei) • H c (^4) • WcO&i)" 1 = 1 ■ 63/315, a con- 
tradiction. Hence, by Lemma Tl 2. 11 there are 2 orbits of transitivity + , 0~, with 
representatives = (xo, u\), E^ = (xq, 1*2). 

Since H Ea {C 2 ) = 3, we have H* C {C 2 \E+) = 6/2 = 3. Then H* C {C 2 \E±) = 12. 
By Q, |0+| - H C (G 2 ) • n* c (C 2 \E+) ■ HeA^)' 1 = 63 and, similarly, \0~\ = 252. 

By ©, 63 = HaAEa) • H C (A 4 ) = |0+| • HcO^I^) + |0~| • Hc^l^) = 
63 • tt c (£j|A 4 ) + 252 • HciEilAi). This is only possible when H C (E^\A 4 ) = 1 
and TLc{E^\Ai) = 0. In other words, a copy of i? 4 is contained in A4 if and only 
if it belongs to + . 

Let us have a look at the relation between E4 and M(S 3 ). 

Lemma 12.2. Wc(£ 4 + l^(S 3 )) = 0, WcO^l^s)) = 4. 

Proof. Consider E^ = (xo, ui). Assume that there is G = S3 such that < 
M{G). Since {e, go, gi, g 2 } = E~\ ^ G, there is exactly one involution gi in 
G, say go. Write gi = [cti, a^] for appropriate vectors on S -F 3 , and note that 

«0 + «1 + a 2 — 0. 

There is y = [7, <5] 6 G such that (y, g ) = G. Then |j/0 O | = 3, \ygi\ = \yg 2 \ = 2. 
By Lemma \7. 11 7 • 7^ <5 • on if and only if £ = 0. Hence = 7- («o + a i + 0^2) ^ 
<5 • (ao + a\ + oi 2 ) = 0, a contradiction. 

Inevitably, H c | M(5 3 )) = 0. We proceed to calculate n c (E^\M(S 3 )). Since 
n M (s 3 )(Ei) = 9, by LemmaO we have 9 • 112 = H M (s 3 )(Ei) ■ H C (M(S 3 )) = 
\0+\ ■ Hc(E£\M(S 3 )) + \0~\- Hc(E±\M(S 3 )) = 63 • + 252 • H C (E^ \M(S 3 )). □ 

Finally, we have a look at the constants c s = Tic {E% \ M{Aij) , for e G {+, — }. 

Lemma 12.3. With the above notation for c + , c~ , we have 

(i) (c+, c") e {(3, 4), (7, 3), (11, 2), (15, 1), (19, 0)}, 

(ii) c+ < 7, 

(iii) c~ < 3. 

Hence c + = 7 anrf c _ = 3. 

Proof. Since (G 2 ) = 3 and (-E4) = 1, we have Wm(.44) (-E4) = 19, by Lemma 
O Formula © then yields 19-63 = W M (A 4 )(-E4) • Hc{M{Aa)) = \0+\ ■ c+ + \0~\ ■ 
cr = 63c+ + 252c" = (c+ + 4c") • 63. In particular, c+ + Acr = 19, and (i) follows. 
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Let E\ — (xq, ui). We are trying to find a group G = A4 such that E± < M(G). 
We look again at the distribution of the 3 involutions xq, u%, xqui in the cosets G, 
Gu. There are two possibilities: either E\ < G, or \E^ n G\ = 2. 

Suppose that Ef < G. As ^4(^4) = 1 and Wm(a 4 )(Ai) = 1- there is at most 
one subloop M = M(Ai) such that Ef < M in such a case. 

Now suppose that \E% n G\ = 2. Then £ 4 +nG is one of the three 2-element 
subgroups of E\ . Let us call it H. Since Ha 4 (C2) = 3 and Hm(A 4 )(^U) = 1, there 
are at most 3 subloops M = M2i(G) such that H < G < M. Because there are 
three ways to choose H in Ef , there are at most 3-3 = 9 subloops M = M{A±) 
such that E% < M. 

Altogether, c+ < 1 + 9 = 10. By (i), c+ < 7, and (ii) is finished, 

Let E4 = (a; , u 2 ). We are trying to find a group G = A 4 such that E± < 
M2i{G). Since TCc(E^ M(Aj)) = 0, the group E^ is not contained in G, i.e., 
\E± fl G\ = 2. By Proposition [721 we can assume that E± n G = {e, x }- If there 
is such a group G, there is also an element y — {(71, 72, 73), $2> <53)}n such 
that (so, y) = G = A4, i.e., 

|yx | = 3, \yu 2 \ = 2, \y(x u 2 )\ =2. (11) 

By Lemma 17.11 the system of equations (TTTj) is equivalent to 

5i + 5 2 + + 71 + 72 +73 = 1, 

£1+72 = 1, (12) 
£2+71 = 1 • 

In particular, 73 + ^3 = 1. There are 4 solutions to (HU), namely 
hi, 72, 73\ / fc, fc + 1, m \ 

This is easy to see since both (71, 72) = (0, 0), (1, 1) lead to det y = 0. Hence, there 
are at most 8 candidates for y (with n — 0, 1). However, if (x Q , y) is isomorphic to 
A4, then every element of order 3 in (xq, y) must satisfy (fT2")) . There are 8 elements 
of order 3 in A4, and thus there is at most 1 subloop M(G) satisfying all of our 
restrictions. 

Because our choice of xq G E^ n G was one of three possible choices, we conclude 
that c~ < 3. 

Combine (i), (ii), (hi) to get c + = 7, c~ = 3. □ 
13. Subloops isomorphic to E$ 

Recall the representatives E^ = (xq, ui), E^ = (xq, 112), and observe that the loop 
(xq, ui, U2) is a group isomorphic to Eg. 

Lemma 13.1. H C (E£\E S ) = 3, H C (E^\E S ) = 1. 

Proof. Write d £ — Hc(V 4 6 \Eg,). We have seen that both d + , d~ are positive. 
Inspection of Table [T] reveals that there are 12 involutions y ^ E^ such that 
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\xoy\ = \uiy\ — 2. This immediately shows that d + < 3. In fact, y = [000, 110], 
[010, 010], [010, 100] yield 3 different copies of E%. Thus d+ = 3. 

Yet another inspection of Table [1] shows that there are 12 involutions y £ E± 
such that \xay\ — \v,2y\ = 2. This means that d~ < 3, but we prove more. The 
group E± is contained in 4 copies of Mfft), by Lemma [12.21 Let M be one of 
them. We can assume that M = G U Gu, where G = S3, xq E G, U2 — u. Since 
G-Gu = Gu, every element y of Gu satisfies \xoy\ — 2. No involution y of G satisfies 
\xoy\ = 2. Since Gu ■ Gu — G and 'H-oiC'i) — 3, there are 3 involutions y G Gu such 
that |yu| = 2. One of them is x u. Altogether, d~ < (12 - (3 - 1) • 4)/4 = 1. □ 

Lemma 13.2. Every copy of Eg in C contains a subgroup from 0~ . 

Proof. Note that the proof of Lemma 112.11 implies that (xq , y) € + if and only if 
y is a permutation of u\ or U4, i.e., ?/ is one of the 6 diagonal elements in Table [T] 
Let us denote this set by S. 

Let £ be a copy of E$ in C. Without loss of generality, xq G E. Assume that 
(x , y) e 0+ for every y £ E\{e, x }- Then i? = 5U{e, xq}. We proceed to show 
that x = [001, 001], y = [100, 100] G S satisfy (a;, y) G O". 

We have carefully chosen the notation so that y is the same as in the proof 
of Proposition 17.21 According to the last line of that proof, x = 7{ooi, ioi}i (y)- 
Using the same automorphism again, we get 7/001, ioi}i ( x ) = [001, 000]. Hence 
{x,y)eO-. ' ' □ 

Proposition 13.3. The group Aut(C) acts transitively on the 63 copies of Eg. 
Also ) Hc{E s \M(A 4 )) = 3. 

Proof. Let E, E' be two subgroups of C isomorphic to E%. Then there are G, 
G' G 0~ such that G < E, G' < E' , by Lemma MM Since G, G' belong to the 
same orbit, there is tp G Aut(C) mapping G onto G' . As Hc(E^ \Es) = 1, <p must 
map E onto E'. 

By Q and LemmaUHl 7 ■ H c (£ 8 ) = He 8 (E 4 ) ■ H c (£ 8 ) = ■ rf + + |0~| ■ 
rf" = 63 • 3 + 1 • 252 = 441. Hence, H C (E 8 ) = 63. Consequently, © yields 
Hc(E 8 \M(A4)) = H M {At){E%) ■ Hc{M{Ai)) ■ U C {E & )- 1 = 3, and we are finished. 

□ 

14. Subloop lattice 

It is about time to show that C contains no copies of Eiq. Assume that G = E\e is 
a subgroup of C. By Proposition ll3.3l we can assume that (xq, u\, U2) < G. Then 
there must be at least 8 involutions y outside (xo, u\, U2) in C such that \x^y\ = 
\u\y\ = \u2y\ = 2. Previous inspection of Table [1] provided none, a contradiction. 
Let us summarize the results about M*(2) obtained in this paper. 

Theorem 14.1. The smallest 120-element nonassociative simple Moufang loop 
C satisfies the strong Lagrange property but not the weak Cauchy property. The 
following loops (and no other) appear as subloops of C : {e}, C2, C3, E4, S3, E 8 , 
A 4 , M(S 3 ), M{Ai), and C. 
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The automorphism group Aut(C) acts transitively on the copies of each of these 
subloops, with the exception of E<±. There are two orbits of transitivity + , 0~ for 
Ei. With the notational conventions introduced in Section^ we have the following 
orbit representatives: (xq) for C 2 , (yo) for C3, (xq, ui) for + , (xq, u 2 ) for 0~ , 
{xq, yo) for S 3 , (x Q , ui, u 2 ) for E$, (x , z ) for A 4 , (x , yo, uq) for M(S 3 ), and 
(x , zo, ui) forM(A 4 ), where x Q = [111, 111], y = {Oil, 110}i, z a = {110, 100} , 
Mo = [000, 110], u\ = [001, 001], and u 2 = [100, 010]. The subloop structure and 
Hasse constants for C are summarized in Figure [H 
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